3 ms·
Do you really think the password is on the device instead of using some sort of revokable token authentication mechanism?
by maherbeg 12y ago
Do you really think the password is on the device instead of using some sort of revokable token authentication mechanism?
- mschuster91 12y agoAnd tokens can be abused or stolen (given they're not stored or paired with other tokens/keys residing inside a TPM), we have seen numerous cases of people hijacking others' AWS accounts and using them for mining bitcoin, of all things.
- nailer 12y agoThat's done with an AWS secret key, which is effectively your password to the AWS API, and not a limited use token.
- mschuster91 12y agoI know that, still people have managed to commit their passwords, ssh keys and more to github.